Skip to content

ci: remove setup-python action blocked by enterprise policy - #957

Merged
StephenWakely merged 4 commits into
masterfrom
fix/release-workflow-setup-python
Jun 24, 2026
Merged

ci: remove setup-python action blocked by enterprise policy#957
StephenWakely merged 4 commits into
masterfrom
fix/release-workflow-setup-python

Conversation

@StephenWakely

@StephenWakely StephenWakely commented Jun 24, 2026

Copy link
Copy Markdown
Contributor

Problem

The v0.52.2 release CI job was failing with:

The action actions/setup-python@v5 is not allowed in DataDog/datadogpy because all actions must be from a repository owned by your enterprise, created by GitHub, or match the pattern: pypa/gh-action-pypi-publish@*.

The workflow's pinned SHA (e9aba2c848f5ebd159c070c61ea2c4e2b122355e) has a stale comment of # v2.3.4 but actually resolves to setup-python@v5, which is blocked by the enterprise action policy.

Fix

Remove the setup-python step entirely. Ubuntu runners already ship with Python, so this step is unnecessary.

A couple of extra fixes from #912 which changed the release to use the gh-action-pypi-publish action are needed:

  1. We don't need to install datadog_checks_dev. That job is removed.
  2. We need to build the package prior to release first.

Test plan

  • Merge and re-publish the v0.52.2 release to confirm the Build job passes

Ubuntu runners already have Python available. The pinned SHA resolved
to setup-python@v5 which is not in the enterprise allowlist.

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
@StephenWakely
StephenWakely requested a review from a team as a code owner June 24, 2026 13:42
@datadog-datadog-prod-us1

This comment has been minimized.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: fa34432956

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread .github/workflows/release.yaml Outdated
StephenWakely and others added 2 commits June 24, 2026 15:15
Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
ddev is not used in the publish job.

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
@StephenWakely StephenWakely added the changelog/no-changelog Changes don't appear in changelog label Jun 24, 2026
pypa/gh-action-pypi-publish only uploads from dist/ — it does not
build. Without this step, there are no distributions to publish.

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
@StephenWakely
StephenWakely merged commit d16aac7 into master Jun 24, 2026
20 checks passed
@StephenWakely
StephenWakely deleted the fix/release-workflow-setup-python branch June 24, 2026 16:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

changelog/no-changelog Changes don't appear in changelog

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants